Behavioral task
behavioral1
Sample
a258d62df36c9e2f27a7c7510cb04055.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a258d62df36c9e2f27a7c7510cb04055.exe
Resource
win10v2004-20240221-en
General
-
Target
a258d62df36c9e2f27a7c7510cb04055
-
Size
48KB
-
MD5
a258d62df36c9e2f27a7c7510cb04055
-
SHA1
1ae9730b419a41aa535a1f269c447a50dac7acbd
-
SHA256
62c21650b0d17c975be10fbaf78afd429061eee2e6de37282800282f3bf9f7c9
-
SHA512
ee0bc57875efed29ed872b2cc3980bd1920906fb202c9e2c09b0ce4ca595c744e2ab495320772442a079f85539091ba9692212ff91970b0c93fc93880e3d83d9
-
SSDEEP
768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFkg/s0V2hXSgbGLBHesx:SKcR4mjD9r823Fn/shrbcHes72PjW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a258d62df36c9e2f27a7c7510cb04055
Files
-
a258d62df36c9e2f27a7c7510cb04055.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE